Getting Data In

HF not send the logs to Splunk Cloud instance

Unnamed16
Loves-to-Learn

Hi Splunkers,

 

i already done configuration of HF and install uf credentials. but i can't see the logs of palo alto in Splunk Cloud 

 

for HF

Spoiler
 

Inputs.conf

[udp://5000]

index = xxxxx_pan

disabled = false

sourcetype = pan_log

 

but HF and Splunk Cloud instance have communicating. 

Spoiler
Unnamed16_0-1706158052825.png

 



please help me 

Labels (1)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

Are you sure your events are properly reaching your HF and are received by the HF?

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...